CAC en­acts se­cu­rity as­sess­ment method to guar­an­tee safe use of cloud computing

Global Times US Edition - - BIZUPDATE -

China pub­lished a se­cu­rity as­sess­ment method for cloud computing ser­vices on Mon­day, which will help re­duce net­work se­cu­rity risks per­tain­ing to buy­ing a cloud computing ser­vice, ex­perts say.

The as­sess­ment regime is de­signed to en­hance in­for­ma­tion op­er­a­tors’ con­fi­dence in mi­grat­ing busi­ness and data to cloud ser­vice plat­forms by im­prov­ing se­cu­rity con­trol of cloud ser­vice providers, ac­cord­ing to the Cy­berspace Ad­min­is­tra­tion of China (CAC).

Po­ten­tial net­work se­cu­rity problems such as unsafe in­ter­faces, data loss or leak­age, ac­count or ser­vice hijacking, will be ef­fec­tively mon­i­tored, said the CAC.

“Cloud computing al­lows users to sig­nif­i­cantly re­duce in­fra­struc­ture costs and have access to IT re­sources and ser­vices of high qual­ity - this is why the gov­ern­ment vows to pro­mote the use of cloud computing,” said a state­ment from CAC.

The new as­sess­ment method will take ef­fect from Septem­ber 1 and as­sess­ments will be valid for three years for cloud computing ser­vice providers who pass the se­cu­rity check, ac­cord­ing to the no­tice on the web­site of the CAC pub­lished on Mon­day.

Cloud computing ser­vice providers who ap­ply to serve gov­ern­ment or­ga­ni­za­tions and key in­for­ma­tion in­fra­struc­tures will be as­sessed by the CAC, the Na­tional De­vel­op­ment and Re­form Com­mis­sion, the Min­istry of In­dus­try and In­for­ma­tion Technology and the Min­istry of Fi­nance.

Dif­fer­ent cloud plat­forms op­er­ated by the same cloud ser­vice provider need to ap­ply for se­cu­rity as­sess­ments.

In the process of evaluation, all as­ses­sors will as­sume the obli­ga­tion of con­fi­den­tial­ity for non-public ma­te­ri­als sub­mit­ted by cloud ser­vice providers and the non-public in­for­ma­tion ob­tained dur­ing the process in or­der to pro­tect busi­ness secrets and in­tel­lec­tual prop­erty rights.

The CAC an­nounced the first batch of cloud computing ser­vices that passed the net­work se­cu­rity re­view on Septem­ber 20, 2016. Three cloud plat­forms have passed the re­view then, in­clud­ing Aliyun which was de­vel­oped by Alibaba Cloud Corp.

Newspapers in English

Newspapers from USA

© PressReader. All rights reserved.